Senior Consultant – Information Security (ISR - DESC)
Role Overview
Leads information security governance, ISMS management, risk management, compliance, third-party assurance, audit coordination, and security advisory.
Works with business units, IT, procurement, legal, HR, project teams, and executive management to identify, assess, manage, and report security risks.
Key Skills for This Role
Full Job Posting
Role overview
Leads information security governance, ISMS management, risk management, compliance, third-party assurance, audit coordination, and security advisory.
Works with business units, IT, procurement, legal, HR, project teams, and executive management to identify, assess, manage, and report security risks.
Governance, risk, and assurance
- Manage and improve the ISMS; maintain policies, standards, procedures, and guidelines.
- Coordinate ISO 27001 certification, surveillance, management reviews, and reporting; monitor security objectives, KPIs, corrective actions, and improvement initiatives.
- Assess information security risks across projects, systems, vendors, and business processes; facilitate treatment and monitor mitigation.
- Assess vendors and technology providers, review contractual security clauses, recommend treatments, and maintain risk registers and remediation actions.
Projects, audits, and incidents
- Participate in project reviews and steering committees, ensuring security requirements are addressed through project lifecycles.
- Coordinate internal and external audits, maintain evidence, track findings and remediation plans, and report compliance to management.
- Participate in incident governance reviews and support investigations, root cause analysis, lessons learned, and corrective and preventive actions.
Required qualifications
- Bachelor’s or master’s degree in Information Security, Computer Science, Information Systems, or a related discipline.
- 10+ years of overall experience, including at least 6 years in Information Security GRC.
- Hands-on experience implementing and maintaining ISO 27001; experience conducting third-party security assessments.
- Experience reviewing technology contracts and security clauses, supporting audits and certification, and engaging business and executive stakeholders.
Preferred certifications
- CISSP, CISM, CISA, CRISC, ISO 27001 Lead Implementer/Lead Auditor, CDPSE, or ISO 22301 Lead Auditor/Implementer is preferred.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Paramount Computer Systems
Security Engineer - GRC/ISMS - ISR
, UAE
The employer is seeking an experienced Security Engineer to manage information security governance, risk, and compliance, including ISMS improvement, vendor assessments, audits, and incident governance. The role requires
Sales Executive (Saudi Nationals)
Riyadh, KSA
Paramount Computer Systems is seeking an early-career Sales Executive to generate leads, build client relationships, and support sales proposals and follow-ups. The role requires fluency in English and 0–1 year of sales
Security Engineer - GRC/ISMS
, UAE
The employer is seeking a senior security GRC/ISMS specialist to maintain its information security management system, manage risk, support audits, and advise on project and vendor security. Candidates need a relevant deg
Senior Consultant – Information Security (GRC
, UAE
The employer seeks a senior information security GRC consultant to lead ISMS, risk, compliance, vendor assurance, audits, and security advisory work. Candidates need 10+ years of overall experience, including 6+ years in
Forti-SOAR Administrator
, UAE
The employer is seeking a FortiSOAR Administrator to manage and optimize a customer’s SIEM/SOAR environment and support SOC operations. The role requires hands-on FortiSOAR and IBM QRadar expertise, along with SIEM/SOAR
Senior Security Engineer (NCA, DLP, Network Security)
Khobar, KSA
Paramount Computer Systems seeks an experienced Senior Security Architect to design, implement, and govern enterprise security architectures. The role requires strong expertise in NCA ECC compliance, Data Loss Prevention
Security Consultant – AppSec & Penetration Testing.
, QAT
Paramount Computer Systems seeks a Senior Security Consultant to assess application security and penetration-test web, API, Android, and iOS applications. The work includes DevSecOps, secure SDLC, vulnerability analysis,
Project Manager – Enterprise GRC Solution Implementation
Riyadh, KSA
The employer is seeking a Project Manager to deliver enterprise GRC platform implementations and connect business stakeholders with technical teams. Candidates need 8+ years of overall experience, hands-on experience wit
Security Engineer - GRC/ISMS - ISR
, UAE
Sales Executive (Saudi Nationals)
Riyadh, KSA
Security Engineer - GRC/ISMS
, UAE
Senior Consultant – Information Security (GRC
, UAE
Forti-SOAR Administrator
, UAE
Senior Security Engineer (NCA, DLP, Network Security)
Khobar, KSA
Security Consultant – AppSec & Penetration Testing.
, QAT
Project Manager – Enterprise GRC Solution Implementation
Riyadh, KSA